agentfootprint 10.3.1 → 10.5.0

package/AGENTS.md

@@ -34,9 +34,9 @@ Two more absences: there is **no runtime force-stop governor** (`routeRecorder()
 only *labels* a spinning run; `maxIterations` is the hard stop), and there is **no
 automatic re-delivery of an ageing skill body** (the inert `refreshPolicy` was removed in 10.0.0 — use `surfaceMode: 'both'`).
 
-## Subpath map — 18 doors
+## Subpath map — 19 doors
 
-`agentfootprint` (main barrel: `Agent`, `LLMCall`, `defineTool`, control flow, patterns, `defineRAG`, pause/resume) · `/providers` (`mock`, `anthropic`, `openai`, `bedrock`, `ollama`, `mcpClient`, embedders — every provider, so bundlers never walk the vendor SDKs from the main barrel) · `/context` (`defineSkill`, `defineFact`, `defineSteering`, `defineInstruction`, `skillGraph`, `skillsFromDir`, the scorers) · `/memory` (`defineMemory`, `InMemoryStore`, `mockEmbedder`, the stores) · `/rag` (stores + loaders; `defineRAG` itself is on the main barrel) · `/observe` (recorders, tracing, `RunStep`) · `/resilience` (provider decorators) · `/reliability` (only the reliability gate's distinct `CircuitOpenError`; rules live on `/resilience`) · `/cache` (prefix-cache strategies, chosen from the provider's declared `promptCaching` by `cacheStrategyFor`) · `/security` · `/hosting` · `/events` · `/skill-graph` (the routing layer with no framework attached, for a host that is not this agent) · `/recipes` (`defineAgentRecipe` — one named, versioned agent setup, applied with `.recipe()`) · `/maps` (`Claim<T>` and the map-engagement vocabulary behind `.maps()`) · `/classify` (the calibrated-classifier port: `Classifier`, `mockClassifier`) · `/ontology` (`defineOntology` — a declared map of the domain, mounted with `.ontology()`) · `/time` (`convertForTool` + `sugarForms` + `granularityMsOf` — the time layer's own answer to whether and how a tool reads a window, for an app outside a run; the steps `convertExact`, `convertWidened`, `periodFactProblem` too). `package.json` `exports` is the complete list; a path not on it does not resolve.
+`agentfootprint` (main barrel: `Agent`, `LLMCall`, `defineTool`, control flow, patterns, `defineRAG`, pause/resume) · `/providers` (`mock`, `anthropic`, `openai`, `bedrock`, `ollama`, `mcpClient`, embedders — every provider, so bundlers never walk the vendor SDKs from the main barrel) · `/context` (`defineSkill`, `defineFact`, `defineSteering`, `defineInstruction`, `skillGraph`, `skillsFromDir`, the scorers) · `/memory` (`defineMemory`, `InMemoryStore`, `mockEmbedder`, the stores) · `/rag` (stores + loaders; `defineRAG` itself is on the main barrel) · `/observe` (recorders, tracing, `RunStep`) · `/resilience` (provider decorators) · `/reliability` (only the reliability gate's distinct `CircuitOpenError`; rules live on `/resilience`) · `/cache` (prefix-cache strategies, chosen from the provider's declared `promptCaching` by `cacheStrategyFor`) · `/security` · `/hosting` · `/events` · `/skill-graph` (the routing layer with no framework attached, for a host that is not this agent) · `/recipes` (`defineAgentRecipe` — one named, versioned agent setup, applied with `.recipe()`) · `/maps` (`Claim<T>` and the map-engagement vocabulary behind `.maps()`) · `/classify` (the calibrated-classifier port: `Classifier`, `mockClassifier`) · `/ontology` (`defineOntology` — a declared map of the domain, mounted with `.ontology()`) · `/time` (`convertForTool` + `sugarForms` + `granularityMsOf` — the time layer's own answer to whether and how a tool reads a window, for an app outside a run; the steps `convertExact`, `convertWidened`, `periodFactProblem` too) · `/ag-ui` (`agUi()` — the AG-UI adapter: `streamHandler({ agent: () => buildAgent(), adapter: agUi(), threads: verifiedThreads(identity), sessions })` from `/hosting` serves agents to any AG-UI frontend, a fresh agent per request, the thread bound to the VERIFIED caller; `agUiSerializer` + `agUiSse` for a transport of your own; framed by the optional peer `@ag-ui/encoder`). `package.json` `exports` is the complete list; a path not on it does not resolve.
 
 ## Core Concepts
 

package/CAPABILITIES.md

@@ -20,6 +20,14 @@ not in this table, search `src/index.ts` for the nearest noun before writing cod
 
 | If you are about to build… | It is | Where | Since |
 |---|---|---|---|
+| giving a tool the credential that arrived WITH the incoming request (an encrypted per-request token, a session key) — sealed per run so no copy, log or state carries it, read only by the run that carried it (its composition members included, at any depth; a resume serves the resume's request), failing closed by name when absent; strategies for bearer, API-key header and decrypt-then-read; through a host, the app seals each request's credential from its headers (`sealRequest`) and the host hands it to that request's run only — a handle returned twice refused, a sealer's throw refused in fixed words | `requestContext` + `requestCredentials` + `asBearer` / `asApiKey` / `decodedWith` + `RequestCredentialError` (`agentfootprint/security`), `run(input, { request })`; `sealRequest` + `RequestSealer` on `standingAgent` / `streamHandler` (`agentfootprint/hosting`) | `src/identity/requestCredentials.ts` | 10.5.0 |
+| hiding a credential or identity ARGUMENT of a tool (an MCP server's `token` field) from the model — removed from the schema the model sees, a model-sent value refused by name, filled from `ctx.credential` / `ctx.identity` inside `execute`, echoes of the credential scrubbed from results and errors | `hostFilled` + `fromCredential` / `fromIdentity` + `HostFilledArgumentError` | `src/tools/hostFilled.ts` | 10.5.0 |
+| running the same composition (Sequence / Parallel / Conditional / Loop / workflow / graph, nested) for many users at once without their member agents sharing memory or identity — the caller's identity passed once to the composition and handed to every member at any depth; with none, each run is its own conversation; a mounted agent no run reaches refused by name, never run under a placeholder or its instance's last caller | `Sequence.run({ message, identity })` (and every composition's input) + `MemberIdentityError` | `src/core/memberRun.ts` | 10.4.0 |
+| keeping a memory write out of a managed service's long-term extraction, or filing what it derives under one tenant's namespace — vendor-neutral write options on the `MemoryStore` port (`put`/`putMany`/`putIfVersion`), declared per store and REFUSED BY NAME where not honoured (never dropped), bound by `defineMemory` to every write AND search of a memory (the scope comes only from the run's identity; a per-call scope, an empty one, a search namespace that does not hold it segment for segment, or one that omits the person's actor is refused; `requireNamespaceScope` refuses unscoped access) and checked before the first turn; AgentCore maps them to `CreateEvent`'s `extractionMode: 'SKIP'` and `extractionConfig.namespaceVariables` only when its client and SDK can carry them, checks AgentCore's variable domain first, and ships a one-to-one tenant encoder into its alphabet | `MemoryWriteOptions` (`extraction: 'skip'`, `namespaceScope`) + `MemoryStore.writeOptions` + `defineMemory({ writeOptions, namespaceScope })` + `SearchOptions.namespaceScope` + `UnsupportedMemoryWriteOptionError` + `refuseUnhonouredWriteOptions` + `agentCoreNamespaceValue` (`agentfootprint/memory`) | `src/memory/store/writeOptions.ts` | 10.4.0 |
+| calling an MCP server somebody deployed TO AWS Bedrock AgentCore Runtime (`--protocol MCP`) — through `InvokeAgentRuntime` with SigV4, or a bearer token over the documented HTTPS endpoint (the SDK has no bearer scheme); a fresh runtime session per call by default (`'per-call'` carries no session id, so one client can serve every user) or one per client (`'reuse'` keys each client's connection — its `runtimeSessionId` and the server's `Mcp-Session-Id` — by a handle the transport issues); what the MCP client reads of a failure rewritten from fixed sentences and safe ids (status, a plain error type, a JSON-RPC code), never the service's text (which can quote the signed request); a bearer token vended as a machine token only; the runtime's "Session operation in progress" refusal (JSON-RPC -32005 inside an HTTP 200, which MCP clients never retry; or the API's 409 `RetryableConflictException`) retried with bounded backoff by the SAME loop as the 429 retry, one small decision function — and nothing else re-sent: the SDK client's own retry is off, so a 5xx or a dropped connection is never replayed | `agentCoreRuntimeMcpTransport` + `agentCoreRuntimeUrl` + `AGENTCORE_RUNTIME_SESSION_HEADER` (`agentfootprint/providers`) | `src/adapters/mcp/agentcoreRuntime/` | 10.4.0 |
+| bundling an app that speaks MCP (esbuild, webpack, a Lambda zip without `node_modules`) — the MCP and AWS SDKs load through a lazy `require` a bundler cannot follow, so the caller hands over the modules it imported statically | `mcpClient({ sdk: { Client, StreamableHTTPClientTransport } })` · `agentCoreRuntimeMcpTransport({ sdk })` (SigV4 only; `_sdk` = the older name, both-different refused, `sdk` beside `{ bearer }` refused); a missing or wrong SDK is refused when the client/transport is BUILT, in words naming `sdk`, never at the first tool call. Docs: mcp-client "Bundling (esbuild, webpack)". Fenced by `test/mcp/bundling.test.ts` | `src/mcp/` | 10.5.0 |
+| serving agents to AG-UI frontends (CopilotKit, the AG-UI Dojo, an `@ag-ui/client` app) from any framework with no glue code — POST a `RunAgentInput`, stream AG-UI events back; the request is untrusted browser input: only the newest user message is conversation (the page's copy is never read), a system/developer message refused, an answer taken only for the pause the server keeps, frontend tools only by the app's name allow-list with its own contract (they run in the page, no server privilege), `state`/`context` only through the app's validators, no identity/credential/redaction from a request; a fresh runner per request, the thread bound to the caller the app authenticates, the conversation and paused runs kept server-side, one turn per thread, door guard, body ceiling, SSE keep-alive | `streamHandler` + `ProtocolAdapter` + `verifiedThreads` (`agentfootprint/hosting`) + `agUi` (`agentfootprint/ag-ui`) | `src/hosting/streamHandler.ts` | 10.4.0 |
+| serving an agent behind a GATEWAY that speaks AG-UI in its own request body and its own output envelope (`{"eventType":"…Event","event":{…,"eventSequence":n}}`) — `agUi()` as three replaceable strategies: a reader (the gateway's body → the turn), the translation (AG-UI vocabulary, unchanged) and the framing (the envelope; each frame's number in its own stream handed in by the host, never a shared counter); every untrusted-input rule stays in the core whichever reader ran (shape and ids, no system/developer message, frontend tools by allow-list, state/context by validators, answers only for the kept pause; each value read once) | `agUi({ reader, translation, framing })` + `AgUiRequestReader` / `AgUiTurnRequest` / `AgUiTranslationStrategy` (`agentfootprint/ag-ui`), `SseFraming.frame(event, { sequence })` + `SseFramePosition` (`agentfootprint/observe`) | `src/ag-ui/adapter.ts` | 10.5.0 |
 | checking forced tool choice per model without changing the existing boolean wire declaration; explicit requests refuse before transport, classifiers keep their strict parse alternative, wrappers preserve and fallback pairs intersect | `LLMProvider.supportsForcedToolChoice` + `forcedToolChoiceFor` + `UnsupportedToolChoiceError` (`agentfootprint/providers`) | `src/provider-contract/forcedToolChoice.ts` | 10.1.0 |
 | a typed answer constrained by the PROVIDER'S OWN structured output instead of asked for in prose — the schema sent as Anthropic's `output_config.format`, the agent keeping its tools; one function builds the API-compatible wire copy (objects closed, unsupported constraints moved into the description, recursion / external `$ref` / complex enums / open values / open-keyed maps refused at build by node), the parser still judges; per-model capability with unknown ids read as the newest generation, refused by name at run start and before transport; a `'refusal'` / `'max_tokens'` stop fails the attempt by name even when it parses; `_findings` allowed on the format when the ledger is armed | `.outputSchema(parser, { strategy: 'native', jsonSchema })` + `LLMProvider.carriesNativeOutputSchema` / `supportsNativeOutputSchema` + `nativeOutputSchemaFor` + `UnsupportedNativeOutputError` (`agentfootprint/providers`) + `answerGuarantee: 'native'` + `OutputAttempt.stopReason` | `src/provider-contract/nativeOutputSchema.ts` | 10.3.0 |
 | replaying Anthropic thinking in its original content order; refusing known unsafe active-tool replay, observing each permitted completed-turn omission before sending, and retaining that decision across checkpoints | `LLMMessage.replay` + `UnsafeThinkingReplayError` + `LLMCallHooks.onReplayPrepared` + `agentfootprint.agent.thinking_omitted` | `src/adapters/llm/anthropicThinkingReplay.ts` | 10.1.0 |
@@ -32,8 +40,9 @@ not in this table, search `src/index.ts` for the nearest noun before writing cod
 | identifying which same-name tool call a permission check or credential event describes — captured at dispatch, including resume and inner pull failures; qualify with run identity, missing fields stay unknown | `ToolCallEventIdentity` + `bindToolSecurityEvents` | `src/core/agent/toolSecurityEvents.ts` | 9.137.0 |
 | guiding an evidence repair to ask for missing context without inventing values | `recoveryInstruction` + `EvidenceRecoveryContext` | `src/core/agent/evidence/` | 9.96.0 |
 | checking a typed final answer against scoped evidence before streaming or memory delivery — optional host-authored checks with enforce/observe modes, canonical JSON and bounded read-only artifacts | `answerValidation` + `AnswerValidationError` | `src/answer-validation/` | 9.95.0 |
+| an output guard that sees which tools ran — fail the run when the answer presents code but no code-execution tool ran; this run's tool calls (name, call id, outcome ok/error/not-run; never arguments or results) handed to the enforce check, per run, bounded | `AnswerValidationContext.toolCalls` + `AnswerToolCallsView` + `limits.maxToolCalls` | `src/answer-validation/toolLedger.ts` | 10.5.0 |
 | turning a written operational procedure (a runbook, a triage playbook) into ONE agent tool whose every answer is EVIDENCE — coverage folded up from the inner tools it calls, rule name+version, verdict rows with GENERATED meanings, and the recorded walk as an artifact ticket, never bytes | `runbookAsTool` — dials: `procedure` (factory, invoked per call with `ctx.tools`) + `resultKind` (`'verdict/*'` arms the rowset projection; anything else ships spine + the chart's `report`) + `rules {name, version}` (default absent ⇒ `rule_version: 'undeclared'`) + `verdicts {decider, maxRows}` (default 50; `verdict_meanings` = statically declared branches + this run's rule labels + the DEFAULT branch's label, which reaches evidence only when the chart calls `decide(s, rules, {branch, label})` — fp ≥9.16.1, the default is chosen by NO rule so nothing else can name it, and inside a generated fan-out branch the static walk is blind too; an undeclared or blank label stays ABSENT from the map, never invented from a branch id, and there is deliberately NO caller-supplied meanings map) + `presentation` (`'prose'` default = ship `table` + `VERDICT_RENDER_NOTE` "output it VERBATIM"; `'panel'` = the HOST renders the rowset, so NO `table` key at all + `PANEL_RENDER_NOTE` "the rows are already on the reader's screen — do not reproduce them"; the rowset half is byte-identical across modes, `table` stays RESERVED in both, an unknown value THROWS at definition) + `walk {cap, recording}` (cap default 500; over-cap ⇒ control-flow projection, declared · `recording: true` or `{label, maxBytes}`, default OFF — ALSO files the inner chart's own `{snapshot, events, structure}` under `recording/run` and puts its ref on the spine as `walk.recording_ref`, because the ROW projection cannot be drawn; snapshot read from the REDACTED mirror so one `redact` means the same for both; over `maxBytes` (`DEFAULT_RECORDING_MAX_BYTES` = 5,000,000) it is REFUSED not truncated; every absence — no store / over size / unserializable / store threw — is STATED in `walk.recording_note`, and the four `recording_*` fields are absent entirely when the dial is off) + `composedOf` (drift-checked at agent BUILD) + kept `recorders`/`keepRecord`/`keepRecordLimit`/`redact`; reserved state keys `verdicts`/`coverage`/`report` (the `report` bag lands BESIDE the spine, never over it — a report field spelling `af_coverage`/`af_provenance`/`rule_version`/`walk`/`report_note` or a live projection key is discarded and NAMED in `result.report_note`; precedence is explicit in `report.ts`, never spread order); inner `absent()` passes through VERBATIM unless the call said `allowAbsent`; walk kind `recording/chart-walk` + `walk_segment` discriminant | `src/core/runbook/` | 9.76.0, recording 9.79.0 |
-| speaking MCP from a BROWSER — the SDK is browser-clean (its client + streamableHttp bundle at `platform:'browser'` with zero `node:` edges and never pull in `client/stdio.js`); the one barrier was that `lazyRequire` gets CALLED there, so the fix is to let the caller supply what the loader would have found | `mcpClient({ sdk })` (`McpSdk` = the two SDK modules you imported statically; the library STILL builds the transport, so headers/fetch/gateway vending/`retryOnThrottle`/`_meta` all keep working) · `mcpClient({ connection })` (`McpConnection` = listTools/callTool/close, deliberately NO `connect` — you already did; the only arm that reaches the SDK's `jsonSchemaValidator`, i.e. CSP) + `McpConnectionOptions`; `refuseConflictingOptions` REFUSES at construction every option a transport would have consumed, naming where it moved (a knob naming a behaviour that no longer happens is the defect class); `transportUrl` resolves a relative `url` against `globalThis.location.href` (absolute takes the identical branch, Node refuses by name); `sdkLoadFailure` classifies the seven load sites so a browser is never told to install a package it has (resolution failure ⇒ byte-identical historical message); `retryingFetch` + `ThrottleFetch` promoted out of `@internal` so the connection arm keeps its 429 handling. stdio keeps `lazyRequire` FOREVER — it spawns a subprocess. ZERO packaging change: no subpath, no `browser` condition (TypeScript is blind to it), peer stays optional (no literal dynamic `import()`). Fenced by `test/mcp/browserGraph.test.ts` | `src/mcp/` | 9.81.0 |
+| speaking MCP from a BROWSER — the SDK is browser-clean (its client + streamableHttp bundle at `platform:'browser'` with zero `node:` edges and never pull in `client/stdio.js`); the one barrier was that `lazyRequire` gets CALLED there, so the fix is to let the caller supply what the loader would have found | `mcpClient({ sdk })` (`McpSdk` = the two SDK modules you imported statically; the library STILL builds the transport, so headers/fetch/gateway vending/`retryOnThrottle`/`_meta` all keep working) · `mcpClient({ connection })` (`McpConnection` = listTools/callTool/close, deliberately NO `connect` — you already did; the only arm that reaches the SDK's `jsonSchemaValidator`, i.e. CSP) + `McpConnectionOptions`; `refuseConflictingOptions` REFUSES at construction every option a transport would have consumed, naming where it moved (a knob naming a behaviour that no longer happens is the defect class); `transportUrl` resolves a relative `url` against `globalThis.location.href` (absolute takes the identical branch, Node refuses by name); `sdkLoadFailure` classifies the seven load sites so a browser is never told to install a package it has (resolution failure ⇒ the site's own absent-package message, which names the `sdk` hook); `retryingFetch` + `ThrottleFetch` promoted out of `@internal` so the connection arm keeps its 429 handling. stdio keeps `lazyRequire` FOREVER — it spawns a subprocess. ZERO packaging change: no subpath, no `browser` condition (TypeScript is blind to it), peer stays optional (no literal dynamic `import()`). Fenced by `test/mcp/browserGraph.test.ts` | `src/mcp/` | 9.81.0 |
 | calling ANOTHER registered tool from inside a tool's `execute` — composition over the agent's own dispatch map instead of importing the module and building a second query stack | `agentToolDispatch` + `ctx.tools` (ToolDispatch has/call) — sees static and skill-carried tools, NEVER ToolProvider-delivered ones (no build-time list, the 9.72.0 caveat); inner calls get the outer facts with hasArtifacts false and a derived toolCallId, `needs` resolved fail-closed non-interactively, `checkIn` and `wants` tools refused by name, no nested dispatch; declare ingredients via `composedOf` (and `gates` for a pausing procedure) — both travel MCP `_meta` | `src/core/agent/toolDispatch.ts` | 9.76.0 |
 | a tool returning numbers WITH the caveats that make them honest — interval/aggregation grain, is-it-a-counter, when the world was measured, which ground was NOT covered — as typed data the model reads compactly and the record keeps whole | `describedResult()` + `tools.semantics_declared` (model sees `semanticsForModel` projection; `coverage` field absorbed by the coverage()/absent() channel; the old `semantic()` declaration door was removed in 10.0.0) | `src/semantics/` | 9.53.0 |
 | the same typed tool result declared in ONE spelling — camelCase `measuredAt`/`isCounter`/`filterNote`, respelled to the unchanged snake_case wire — with a missing source a COMPILE error; which result helper to return (rows → describedResult, a value with limits → coverage, nothing → absent); an EMPTY data list refused with the branch to write ("if nothing matched, return absent({ what, checked }) instead"), the declaration door and the gate | `describedResult()` + `DescribedResultDeclaration` (`provenance` required whenever `series`/`facts` is present; the snake_case spelling refused, naming the camelCase one) | `src/semantics/described.ts` | 9.119.0, empty-list refusal 9.125.0 |
@@ -134,6 +143,8 @@ not in this table, search `src/index.ts` for the nearest noun before writing cod
 | a per-request deadline on your gateway provider, so a gateway that never answers (or a stream that goes silent) fails typed instead of hanging the run: bounds the response headers, a `complete()` body and EACH stream read (first chunk, then every gap — a stream that keeps talking is never cut off); a miss aborts the request and raises `reason: 'timeout'`, `retryable: true` (withRetry re-opens it while no chunk reached the caller); the caller's `req.signal` still wins; omitted = the fetch gets exactly `req.signal` as before | `timeoutMs` + `invokeModelGateway` + `InvokeModelGatewayError` (`reason: 'timeout'`) | `src/adapters/llm/InvokeModelGatewayProvider.ts` | 9.130.0 |
 | Replay a saved complete domain-event batch with the same fork grouping and nested drill projection as live run steps | `ingestDomainEvents` + `getSteps` + `clear` | `src/recorders/observability/RunStepRecorder.ts` | 10.0.0 |
 | experimental, not yet validated in real use: additive saved-record shapes for scoped historical verification observations; paired checkpoint readers and writers validate retained evidence and counters without judging old observations again, and native continuation refuses an unarmed evidence carrier; protocol only — no runtime verifier, model declaration parser or answer badge is enabled | `FindingsRow` + optional `AgentRunCheckpoint.claimVerification` | `src/core/` | 10.2.0 |
+| an AG-UI frontend (`@ag-ui/client`, CopilotKit, the AG-UI Dojo) reading an agentfootprint run with no glue code — the run's served events translated into AG-UI 1.0 events: streamed text, tool calls with arguments and results, reasoning, ReAct iterations and compositions as steps, a nested agent (a `Sequence` step, a `Parallel` branch) as a sub-agent with its parent links, a pause as an interrupt, a failure as `RUN_ERROR` in the record's words; `CUSTOM` an allow-list of events with projected fields (`AG_UI_CUSTOM_EVENTS`), reasoning only on request; ids minted from the record's address under the request's run id (unique across a thread when branches reuse a provider's tool-call id); nothing a redaction policy hides on the wire, at any depth; framed by the official `@ag-ui/encoder` (optional peer, loaded only when a framing is built) | `agUiSerializer` + `agUiSse` + `AG_UI_CUSTOM_EVENTS` (`agentfootprint/ag-ui`) + `RunTranslation` / `RunSettlement` (the port, `agentfootprint/hosting`) | `src/ag-ui/` | 10.4.0 |
+| writing a run's Server-Sent Events in a different frame shape — the framing is a strategy: `toSSE({ framing })`, default the frames it always wrote | `SseFraming` + `agentfootprintSse` (`agentfootprint/observe`) | `src/hosting/stream.ts` | 10.4.0 |
 
 **Maintaining this table:** a new public capability adds a row, in the same
 change that adds the capability. `test/docs/capability-index.test.ts` fails if a

package/README.md

@@ -228,6 +228,50 @@ Build the entire app against in-memory mocks with **zero API cost**, then swap r
 
 The flowchart, recorders, and tests don't change between dev and prod.
 
+## Any AG-UI frontend — no glue code
+
+AG-UI frontends (CopilotKit, the AG-UI Dojo, any `@ag-ui/client` app) all speak one protocol: POST a `RunAgentInput`, read a stream of typed events. An agentfootprint run is already a stream of typed events, so the only missing piece is the adapter between them — `agUi()`. Hand it to `streamHandler`, a plain `(request) => Promise<Response>` that mounts in Next.js, Hono, Bun, Deno or Workers, and the frontend shows streamed text, tool calls with their results, steps and sub-agents.
+
+A browser request is untrusted, so the handler decides nothing on its word: it builds a fresh agent for every request, binds the thread to the caller *your* verifier proves (`verifiedThreads` — a checked bearer token or sign-in, never a header read as a name), keeps the conversation on the server (`sessions`) and takes only the person's newest message from the page. It reads only what the run *serves*, so anything your redaction policy hides never reaches the browser.
+
+```ts
+// npm install agentfootprint @ag-ui/core @ag-ui/encoder
+import { Agent } from 'agentfootprint';
+import { mock } from 'agentfootprint/providers';
+import { memorySessions, streamHandler, verifiedThreads } from 'agentfootprint/hosting';
+import { agUi } from 'agentfootprint/ag-ui';
+
+// Who is calling — PROVEN, not claimed. A real app: jwksIdentity({ jwksUrl, issuer, audience })
+// from 'agentfootprint/security'. This demo verifier knows one token.
+const verify = async (token: string) => {
+  if (token !== 'demo-token-for-ada') throw new Error('unknown token');
+  return { userId: 'ada' };
+};
+
+const handler = streamHandler({
+  // A fresh agent per request — nothing one caller's run leaves behind reaches another.
+  agent: () =>
+    Agent.create({ provider: mock({ reply: 'Hello from agentfootprint.' }), model: 'mock' })
+      .system('Be brief.')
+      .build(),
+  adapter: agUi(),
+  threads: verifiedThreads({ verify }), // no valid token → 401; the thread is the caller's own
+  sessions: memorySessions(), // the conversation lives on the server (one turn per thread, per process)
+}); // Next.js: export const POST = handler;
+
+// What an AG-UI frontend sends, and what it reads back:
+const response = await handler(
+  new Request('http://localhost/agent', {
+    method: 'POST',
+    headers: { 'content-type': 'application/json', authorization: 'Bearer demo-token-for-ada' },
+    body: JSON.stringify({ threadId: 't1', runId: 'r1', messages: [{ id: 'u1', role: 'user', content: 'Hi' }] }),
+  }),
+);
+console.log(await response.text()); // data: {"type":"RUN_STARTED",…} … data: {"type":"RUN_FINISHED",…}
+```
+
+Two turns with a tool call, end to end: [`examples/deploy/ag-ui.ts`](examples/deploy/ag-ui.ts) · frontend tools, interrupts, what a page may not decide, and what goes out: [AG-UI frontends](https://agentfootprint.dev/docs/infrastructure/ag-ui/).
+
 ## Building with an AI coding assistant
 
 agentfootprint is written to be used — and maintained — by coding agents.

package/ai-instructions/claude-code/SKILL.md

@@ -34,9 +34,9 @@ Two more absences: there is **no runtime force-stop governor** (`routeRecorder()
 only *labels* a spinning run; `maxIterations` is the hard stop), and there is **no
 automatic re-delivery of an ageing skill body** (the inert `refreshPolicy` was removed in 10.0.0 — use `surfaceMode: 'both'`).
 
-## Subpath map — 18 doors
+## Subpath map — 19 doors
 
-`agentfootprint` (main barrel: `Agent`, `LLMCall`, `defineTool`, control flow, patterns, `defineRAG`, pause/resume) · `/providers` (`mock`, `anthropic`, `openai`, `bedrock`, `ollama`, `mcpClient`, embedders — every provider, so bundlers never walk the vendor SDKs from the main barrel) · `/context` (`defineSkill`, `defineFact`, `defineSteering`, `defineInstruction`, `skillGraph`, `skillsFromDir`, the scorers) · `/memory` (`defineMemory`, `InMemoryStore`, `mockEmbedder`, the stores) · `/rag` (stores + loaders; `defineRAG` itself is on the main barrel) · `/observe` (recorders, tracing, `RunStep`) · `/resilience` (provider decorators) · `/reliability` (only the reliability gate's distinct `CircuitOpenError`; rules live on `/resilience`) · `/cache` (prefix-cache strategies, chosen from the provider's declared `promptCaching` by `cacheStrategyFor`) · `/security` · `/hosting` · `/events` · `/skill-graph` (the routing layer with no framework attached, for a host that is not this agent) · `/recipes` (`defineAgentRecipe` — one named, versioned agent setup, applied with `.recipe()`) · `/maps` (`Claim<T>` and the map-engagement vocabulary behind `.maps()`) · `/classify` (the calibrated-classifier port: `Classifier`, `mockClassifier`) · `/ontology` (`defineOntology` — a declared map of the domain, mounted with `.ontology()`) · `/time` (`convertForTool` + `sugarForms` + `granularityMsOf` — the time layer's own answer to whether and how a tool reads a window, for an app outside a run; the steps `convertExact`, `convertWidened`, `periodFactProblem` too). `package.json` `exports` is the complete list; a path not on it does not resolve.
+`agentfootprint` (main barrel: `Agent`, `LLMCall`, `defineTool`, control flow, patterns, `defineRAG`, pause/resume) · `/providers` (`mock`, `anthropic`, `openai`, `bedrock`, `ollama`, `mcpClient`, embedders — every provider, so bundlers never walk the vendor SDKs from the main barrel) · `/context` (`defineSkill`, `defineFact`, `defineSteering`, `defineInstruction`, `skillGraph`, `skillsFromDir`, the scorers) · `/memory` (`defineMemory`, `InMemoryStore`, `mockEmbedder`, the stores) · `/rag` (stores + loaders; `defineRAG` itself is on the main barrel) · `/observe` (recorders, tracing, `RunStep`) · `/resilience` (provider decorators) · `/reliability` (only the reliability gate's distinct `CircuitOpenError`; rules live on `/resilience`) · `/cache` (prefix-cache strategies, chosen from the provider's declared `promptCaching` by `cacheStrategyFor`) · `/security` · `/hosting` · `/events` · `/skill-graph` (the routing layer with no framework attached, for a host that is not this agent) · `/recipes` (`defineAgentRecipe` — one named, versioned agent setup, applied with `.recipe()`) · `/maps` (`Claim<T>` and the map-engagement vocabulary behind `.maps()`) · `/classify` (the calibrated-classifier port: `Classifier`, `mockClassifier`) · `/ontology` (`defineOntology` — a declared map of the domain, mounted with `.ontology()`) · `/time` (`convertForTool` + `sugarForms` + `granularityMsOf` — the time layer's own answer to whether and how a tool reads a window, for an app outside a run; the steps `convertExact`, `convertWidened`, `periodFactProblem` too) · `/ag-ui` (`agUi()` — the AG-UI adapter: `streamHandler({ agent: () => buildAgent(), adapter: agUi(), threads: verifiedThreads(identity), sessions })` from `/hosting` serves agents to any AG-UI frontend, a fresh agent per request, the thread bound to the VERIFIED caller; `agUiSerializer` + `agUiSse` for a transport of your own; framed by the optional peer `@ag-ui/encoder`). `package.json` `exports` is the complete list; a path not on it does not resolve.
 
 ## Core Concepts
 

package/ai-instructions/clinerules

@@ -8,18 +8,27 @@ Building Generative AI applications is mostly **context engineering** — decidi
 import {
   Agent, LLMCall, defineTool,
   Sequence, Parallel, Conditional, Loop,
-  defineSkill, defineSteering, defineInstruction, defineFact,
-  defineMemory, MEMORY_TYPES, MEMORY_STRATEGIES, SNAPSHOT_PROJECTIONS,
-  InMemoryStore, mockEmbedder,
-  anthropic, openai, bedrock, ollama, mock,
   askHuman, pauseHere, isPaused,
-  withRetry, withFallback, resilientProvider,
 } from 'agentfootprint';
+import { defineSkill, defineSteering, defineInstruction, defineFact } from 'agentfootprint/context';
+import {
+  defineMemory, MEMORY_TYPES, MEMORY_STRATEGIES, SNAPSHOT_PROJECTIONS,
+  InMemoryStore, mockEmbedder,
+} from 'agentfootprint/memory';
+import { anthropic, openai, bedrock, ollama, mock, mcpClient } from 'agentfootprint/providers';
+import { withRetry, withFallback, fallbackProvider } from 'agentfootprint/resilience';
 ```
 
-**Top-level barrel only.** Don't import from stale subpaths like
-`agentfootprint/instructions`, `agentfootprint/observe`,
-`agentfootprint/security`, `agentfootprint/explain`.
+**Import each name from the door that exports it.** `package.json` `exports` is
+exhaustive: a path that is not a door does not resolve, and a name imported from
+a door that does not export it fails to compile (and is `undefined` under
+`require`). The core API is on `agentfootprint`. LLM providers, embedders,
+`mcpClient` and MCP transports such as `agentCoreRuntimeMcpTransport` are on
+`agentfootprint/providers`. Memory, its stores included, is on
+`agentfootprint/memory`, context engineering on `agentfootprint/context`,
+resilience on `agentfootprint/resilience`, and observability on
+`agentfootprint/observe`. Paths such as `agentfootprint/instructions` and
+`agentfootprint/explain` do not exist.
 
 ## The 6-layer mental model
 
@@ -57,7 +66,8 @@ Build with `mock()` provider + `InMemoryStore` + `mockEmbedder()` + inline tool
 ### Hello agent — mock-first
 
 ```typescript
-import { Agent, mock } from 'agentfootprint';
+import { Agent } from 'agentfootprint';
+import { mock } from 'agentfootprint/providers';
 
 const agent = Agent.create({ provider: mock({ reply: 'San Francisco: 72°F.' }), model: 'mock' })
   .system('You are a helpful assistant.')
@@ -135,7 +145,8 @@ Strategies: `WINDOW` · `BUDGET` · `SUMMARIZE` · `TOP_K` · `EXTRACT` · `DECA
 ### MCP (Model Context Protocol — connect to external MCP servers)
 
 ```typescript
-import { Agent, mcpClient } from 'agentfootprint';
+import { Agent } from 'agentfootprint';
+import { mcpClient } from 'agentfootprint/providers';
 
 const slack = await mcpClient({
   name: 'slack',
@@ -189,7 +200,7 @@ const tot = Parallel.create()
 ## Anti-patterns — Don't
 
 - ❌ `agent.run('string')` → use `agent.run({ message: '...', identity? })`
-- ❌ Stale subpaths: `agentfootprint/instructions`, `agentfootprint/observe`, `agentfootprint/security`
+- ❌ Paths that are not doors: `agentfootprint/instructions`, `agentfootprint/explain` (see `package.json` `exports`)
 - ❌ `.memoryPipeline(pipeline)` (v1) → use `.memory(defineMemory({...}))`
 - ❌ Shipping a `ReflexionAgent` class → compose `Sequence(Agent, critique-LLM, Agent)`
 - ❌ Closures or class instances in scope (can't be cloned)

package/ai-instructions/copilot-instructions.md

@@ -8,18 +8,27 @@ Building Generative AI applications is mostly **context engineering** — decidi
 import {
   Agent, LLMCall, defineTool,
   Sequence, Parallel, Conditional, Loop,
-  defineSkill, defineSteering, defineInstruction, defineFact,
-  defineMemory, MEMORY_TYPES, MEMORY_STRATEGIES, SNAPSHOT_PROJECTIONS,
-  InMemoryStore, mockEmbedder,
-  anthropic, openai, bedrock, ollama, mock,
   askHuman, pauseHere, isPaused,
-  withRetry, withFallback, resilientProvider,
 } from 'agentfootprint';
+import { defineSkill, defineSteering, defineInstruction, defineFact } from 'agentfootprint/context';
+import {
+  defineMemory, MEMORY_TYPES, MEMORY_STRATEGIES, SNAPSHOT_PROJECTIONS,
+  InMemoryStore, mockEmbedder,
+} from 'agentfootprint/memory';
+import { anthropic, openai, bedrock, ollama, mock, mcpClient } from 'agentfootprint/providers';
+import { withRetry, withFallback, fallbackProvider } from 'agentfootprint/resilience';
 ```
 
-**Top-level barrel only.** Don't import from stale subpaths like
-`agentfootprint/instructions`, `agentfootprint/observe`,
-`agentfootprint/security`, `agentfootprint/explain`.
+**Import each name from the door that exports it.** `package.json` `exports` is
+exhaustive: a path that is not a door does not resolve, and a name imported from
+a door that does not export it fails to compile (and is `undefined` under
+`require`). The core API is on `agentfootprint`. LLM providers, embedders,
+`mcpClient` and MCP transports such as `agentCoreRuntimeMcpTransport` are on
+`agentfootprint/providers`. Memory, its stores included, is on
+`agentfootprint/memory`, context engineering on `agentfootprint/context`,
+resilience on `agentfootprint/resilience`, and observability on
+`agentfootprint/observe`. Paths such as `agentfootprint/instructions` and
+`agentfootprint/explain` do not exist.
 
 ## The 6-layer mental model
 
@@ -57,7 +66,8 @@ Build with `mock()` provider + `InMemoryStore` + `mockEmbedder()` + inline tool
 ### Hello agent — mock-first
 
 ```typescript
-import { Agent, mock } from 'agentfootprint';
+import { Agent } from 'agentfootprint';
+import { mock } from 'agentfootprint/providers';
 
 const agent = Agent.create({ provider: mock({ reply: 'San Francisco: 72°F.' }), model: 'mock' })
   .system('You are a helpful assistant.')
@@ -135,7 +145,8 @@ Strategies: `WINDOW` · `BUDGET` · `SUMMARIZE` · `TOP_K` · `EXTRACT` · `DECA
 ### MCP (Model Context Protocol — connect to external MCP servers)
 
 ```typescript
-import { Agent, mcpClient } from 'agentfootprint';
+import { Agent } from 'agentfootprint';
+import { mcpClient } from 'agentfootprint/providers';
 
 const slack = await mcpClient({
   name: 'slack',
@@ -189,7 +200,7 @@ const tot = Parallel.create()
 ## Anti-patterns — Don't
 
 - ❌ `agent.run('string')` → use `agent.run({ message: '...', identity? })`
-- ❌ Stale subpaths: `agentfootprint/instructions`, `agentfootprint/observe`, `agentfootprint/security`
+- ❌ Paths that are not doors: `agentfootprint/instructions`, `agentfootprint/explain` (see `package.json` `exports`)
 - ❌ `.memoryPipeline(pipeline)` (v1) → use `.memory(defineMemory({...}))`
 - ❌ Shipping a `ReflexionAgent` class → compose `Sequence(Agent, critique-LLM, Agent)`
 - ❌ Closures or class instances in scope (can't be cloned)

package/ai-instructions/cursor/agentfootprint.md

@@ -8,18 +8,27 @@ Building Generative AI applications is mostly **context engineering** — decidi
 import {
   Agent, LLMCall, defineTool,
   Sequence, Parallel, Conditional, Loop,
-  defineSkill, defineSteering, defineInstruction, defineFact,
-  defineMemory, MEMORY_TYPES, MEMORY_STRATEGIES, SNAPSHOT_PROJECTIONS,
-  InMemoryStore, mockEmbedder,
-  anthropic, openai, bedrock, ollama, mock,
   askHuman, pauseHere, isPaused,
-  withRetry, withFallback, resilientProvider,
 } from 'agentfootprint';
+import { defineSkill, defineSteering, defineInstruction, defineFact } from 'agentfootprint/context';
+import {
+  defineMemory, MEMORY_TYPES, MEMORY_STRATEGIES, SNAPSHOT_PROJECTIONS,
+  InMemoryStore, mockEmbedder,
+} from 'agentfootprint/memory';
+import { anthropic, openai, bedrock, ollama, mock, mcpClient } from 'agentfootprint/providers';
+import { withRetry, withFallback, fallbackProvider } from 'agentfootprint/resilience';
 ```
 
-**Top-level barrel only.** Don't import from stale subpaths like
-`agentfootprint/instructions`, `agentfootprint/observe`,
-`agentfootprint/security`, `agentfootprint/explain`.
+**Import each name from the door that exports it.** `package.json` `exports` is
+exhaustive: a path that is not a door does not resolve, and a name imported from
+a door that does not export it fails to compile (and is `undefined` under
+`require`). The core API is on `agentfootprint`. LLM providers, embedders,
+`mcpClient` and MCP transports such as `agentCoreRuntimeMcpTransport` are on
+`agentfootprint/providers`. Memory, its stores included, is on
+`agentfootprint/memory`, context engineering on `agentfootprint/context`,
+resilience on `agentfootprint/resilience`, and observability on
+`agentfootprint/observe`. Paths such as `agentfootprint/instructions` and
+`agentfootprint/explain` do not exist.
 
 ## The 6-layer mental model
 
@@ -57,7 +66,8 @@ Build with `mock()` provider + `InMemoryStore` + `mockEmbedder()` + inline tool
 ### Hello agent — mock-first
 
 ```typescript
-import { Agent, mock } from 'agentfootprint';
+import { Agent } from 'agentfootprint';
+import { mock } from 'agentfootprint/providers';
 
 const agent = Agent.create({ provider: mock({ reply: 'San Francisco: 72°F.' }), model: 'mock' })
   .system('You are a helpful assistant.')
@@ -135,7 +145,8 @@ Strategies: `WINDOW` · `BUDGET` · `SUMMARIZE` · `TOP_K` · `EXTRACT` · `DECA
 ### MCP (Model Context Protocol — connect to external MCP servers)
 
 ```typescript
-import { Agent, mcpClient } from 'agentfootprint';
+import { Agent } from 'agentfootprint';
+import { mcpClient } from 'agentfootprint/providers';
 
 const slack = await mcpClient({
   name: 'slack',
@@ -189,7 +200,7 @@ const tot = Parallel.create()
 ## Anti-patterns — Don't
 
 - ❌ `agent.run('string')` → use `agent.run({ message: '...', identity? })`
-- ❌ Stale subpaths: `agentfootprint/instructions`, `agentfootprint/observe`, `agentfootprint/security`
+- ❌ Paths that are not doors: `agentfootprint/instructions`, `agentfootprint/explain` (see `package.json` `exports`)
 - ❌ `.memoryPipeline(pipeline)` (v1) → use `.memory(defineMemory({...}))`
 - ❌ Shipping a `ReflexionAgent` class → compose `Sequence(Agent, critique-LLM, Agent)`
 - ❌ Closures or class instances in scope (can't be cloned)

package/ai-instructions/kiro/agentfootprint.md

@@ -8,18 +8,27 @@ Building Generative AI applications is mostly **context engineering** — decidi
 import {
   Agent, LLMCall, defineTool,
   Sequence, Parallel, Conditional, Loop,
-  defineSkill, defineSteering, defineInstruction, defineFact,
-  defineMemory, MEMORY_TYPES, MEMORY_STRATEGIES, SNAPSHOT_PROJECTIONS,
-  InMemoryStore, mockEmbedder,
-  anthropic, openai, bedrock, ollama, mock,
   askHuman, pauseHere, isPaused,
-  withRetry, withFallback, resilientProvider,
 } from 'agentfootprint';
+import { defineSkill, defineSteering, defineInstruction, defineFact } from 'agentfootprint/context';
+import {
+  defineMemory, MEMORY_TYPES, MEMORY_STRATEGIES, SNAPSHOT_PROJECTIONS,
+  InMemoryStore, mockEmbedder,
+} from 'agentfootprint/memory';
+import { anthropic, openai, bedrock, ollama, mock, mcpClient } from 'agentfootprint/providers';
+import { withRetry, withFallback, fallbackProvider } from 'agentfootprint/resilience';
 ```
 
-**Top-level barrel only.** Don't import from stale subpaths like
-`agentfootprint/instructions`, `agentfootprint/observe`,
-`agentfootprint/security`, `agentfootprint/explain`.
+**Import each name from the door that exports it.** `package.json` `exports` is
+exhaustive: a path that is not a door does not resolve, and a name imported from
+a door that does not export it fails to compile (and is `undefined` under
+`require`). The core API is on `agentfootprint`. LLM providers, embedders,
+`mcpClient` and MCP transports such as `agentCoreRuntimeMcpTransport` are on
+`agentfootprint/providers`. Memory, its stores included, is on
+`agentfootprint/memory`, context engineering on `agentfootprint/context`,
+resilience on `agentfootprint/resilience`, and observability on
+`agentfootprint/observe`. Paths such as `agentfootprint/instructions` and
+`agentfootprint/explain` do not exist.
 
 ## The 6-layer mental model
 
@@ -57,7 +66,8 @@ Build with `mock()` provider + `InMemoryStore` + `mockEmbedder()` + inline tool
 ### Hello agent — mock-first
 
 ```typescript
-import { Agent, mock } from 'agentfootprint';
+import { Agent } from 'agentfootprint';
+import { mock } from 'agentfootprint/providers';
 
 const agent = Agent.create({ provider: mock({ reply: 'San Francisco: 72°F.' }), model: 'mock' })
   .system('You are a helpful assistant.')
@@ -135,7 +145,8 @@ Strategies: `WINDOW` · `BUDGET` · `SUMMARIZE` · `TOP_K` · `EXTRACT` · `DECA
 ### MCP (Model Context Protocol — connect to external MCP servers)
 
 ```typescript
-import { Agent, mcpClient } from 'agentfootprint';
+import { Agent } from 'agentfootprint';
+import { mcpClient } from 'agentfootprint/providers';
 
 const slack = await mcpClient({
   name: 'slack',
@@ -189,7 +200,7 @@ const tot = Parallel.create()
 ## Anti-patterns — Don't
 
 - ❌ `agent.run('string')` → use `agent.run({ message: '...', identity? })`
-- ❌ Stale subpaths: `agentfootprint/instructions`, `agentfootprint/observe`, `agentfootprint/security`
+- ❌ Paths that are not doors: `agentfootprint/instructions`, `agentfootprint/explain` (see `package.json` `exports`)
 - ❌ `.memoryPipeline(pipeline)` (v1) → use `.memory(defineMemory({...}))`
 - ❌ Shipping a `ReflexionAgent` class → compose `Sequence(Agent, critique-LLM, Agent)`
 - ❌ Closures or class instances in scope (can't be cloned)

package/ai-instructions/windsurfrules

@@ -8,18 +8,27 @@ Building Generative AI applications is mostly **context engineering** — decidi
 import {
   Agent, LLMCall, defineTool,
   Sequence, Parallel, Conditional, Loop,
-  defineSkill, defineSteering, defineInstruction, defineFact,
-  defineMemory, MEMORY_TYPES, MEMORY_STRATEGIES, SNAPSHOT_PROJECTIONS,
-  InMemoryStore, mockEmbedder,
-  anthropic, openai, bedrock, ollama, mock,
   askHuman, pauseHere, isPaused,
-  withRetry, withFallback, resilientProvider,
 } from 'agentfootprint';
+import { defineSkill, defineSteering, defineInstruction, defineFact } from 'agentfootprint/context';
+import {
+  defineMemory, MEMORY_TYPES, MEMORY_STRATEGIES, SNAPSHOT_PROJECTIONS,
+  InMemoryStore, mockEmbedder,
+} from 'agentfootprint/memory';
+import { anthropic, openai, bedrock, ollama, mock, mcpClient } from 'agentfootprint/providers';
+import { withRetry, withFallback, fallbackProvider } from 'agentfootprint/resilience';
 ```
 
-**Top-level barrel only.** Don't import from stale subpaths like
-`agentfootprint/instructions`, `agentfootprint/observe`,
-`agentfootprint/security`, `agentfootprint/explain`.
+**Import each name from the door that exports it.** `package.json` `exports` is
+exhaustive: a path that is not a door does not resolve, and a name imported from
+a door that does not export it fails to compile (and is `undefined` under
+`require`). The core API is on `agentfootprint`. LLM providers, embedders,
+`mcpClient` and MCP transports such as `agentCoreRuntimeMcpTransport` are on
+`agentfootprint/providers`. Memory, its stores included, is on
+`agentfootprint/memory`, context engineering on `agentfootprint/context`,
+resilience on `agentfootprint/resilience`, and observability on
+`agentfootprint/observe`. Paths such as `agentfootprint/instructions` and
+`agentfootprint/explain` do not exist.
 
 ## The 6-layer mental model
 
@@ -57,7 +66,8 @@ Build with `mock()` provider + `InMemoryStore` + `mockEmbedder()` + inline tool
 ### Hello agent — mock-first
 
 ```typescript
-import { Agent, mock } from 'agentfootprint';
+import { Agent } from 'agentfootprint';
+import { mock } from 'agentfootprint/providers';
 
 const agent = Agent.create({ provider: mock({ reply: 'San Francisco: 72°F.' }), model: 'mock' })
   .system('You are a helpful assistant.')
@@ -135,7 +145,8 @@ Strategies: `WINDOW` · `BUDGET` · `SUMMARIZE` · `TOP_K` · `EXTRACT` · `DECA
 ### MCP (Model Context Protocol — connect to external MCP servers)
 
 ```typescript
-import { Agent, mcpClient } from 'agentfootprint';
+import { Agent } from 'agentfootprint';
+import { mcpClient } from 'agentfootprint/providers';
 
 const slack = await mcpClient({
   name: 'slack',
@@ -189,7 +200,7 @@ const tot = Parallel.create()
 ## Anti-patterns — Don't
 
 - ❌ `agent.run('string')` → use `agent.run({ message: '...', identity? })`
-- ❌ Stale subpaths: `agentfootprint/instructions`, `agentfootprint/observe`, `agentfootprint/security`
+- ❌ Paths that are not doors: `agentfootprint/instructions`, `agentfootprint/explain` (see `package.json` `exports`)
 - ❌ `.memoryPipeline(pipeline)` (v1) → use `.memory(defineMemory({...}))`
 - ❌ Shipping a `ReflexionAgent` class → compose `Sequence(Agent, critique-LLM, Agent)`
 - ❌ Closures or class instances in scope (can't be cloned)

package/dist/adapters/llm/AnthropicProvider.js

@@ -20,6 +20,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AnthropicProvider = exports.anthropic = void 0;
 const lazyRequire_js_1 = require("../../lib/lazyRequire.js");
+const abort_js_1 = require("../../lib/abort.js");
 const contextWindow_js_1 = require("../../provider-contract/contextWindow.js");
 const retryAfter_js_1 = require("./retryAfter.js");
 const anthropicCacheWire_js_1 = require("./anthropicCacheWire.js");
@@ -99,13 +100,19 @@ function anthropic(options = {}) {
         // the same function.
         thinkingMode: (model) => modeOf(modelOf(model)),
         async complete(req, hooks) {
+            // A cancelled call sends nothing (lib/abort.ts, law 1).
+            (0, abort_js_1.throwIfAborted)(req.signal);
             const preparation = (0, anthropicThinkingReplay_js_1.prepareAnthropicReplay)(req, modelOf(req.model), 'anthropic');
             const params = buildParams(preparation.request);
             const bindingFactory = (0, anthropicThinkingReplay_js_1.thinkingReplayBinding)(params, params.model);
             if (preparation.omissions.length > 0)
                 hooks?.onReplayPrepared?.(preparation);
             try {
-                const message = await client.messages.create(params);
+                // The signal rides the SDK's request options, so an abort cancels the
+                // HTTP request itself; the race refuses an answer that lands after it.
+                const message = await (0, abort_js_1.untilAborted)(req.signal
+                    ? client.messages.create(params, { signal: req.signal })
+                    : client.messages.create(params), req.signal);
                 // Manifest read from the FINAL params — after tool mapping and cache
                 // markers — because the whole point is catching what the body says,
                 // not what the request intended (wireManifest.ts).
@@ -116,10 +123,11 @@ function anthropic(options = {}) {
                 };
             }
             catch (err) {
-                throw wrapError(err);
+                throw wrapError(err, req.signal);
             }
         },
         async *stream(req, hooks) {
+            (0, abort_js_1.throwIfAborted)(req.signal);
             const preparation = (0, anthropicThinkingReplay_js_1.prepareAnthropicReplay)(req, modelOf(req.model), 'anthropic');
             const params = buildParams(preparation.request);
             const bindingFactory = (0, anthropicThinkingReplay_js_1.thinkingReplayBinding)(params, params.model);
@@ -127,15 +135,20 @@ function anthropic(options = {}) {
                 hooks?.onReplayPrepared?.(preparation);
             let stream;
             try {
-                stream = client.messages.stream(params);
+                stream = req.signal
+                    ? client.messages.stream(params, { signal: req.signal })
+                    : client.messages.stream(params);
             }
             catch (err) {
-                throw wrapError(err);
+                throw wrapError(err, req.signal);
             }
+            const opened = stream;
             let tokenIndex = 0;
             const toolArguments = new anthropicToolArguments_js_1.AnthropicToolArguments();
             try {
-                for await (const event of stream) {
+                // An abort closes the SDK stream and ends this loop at once, even
+                // when a read is still pending (lib/abort.ts, laws 2–3).
+                for await (const event of (0, abort_js_1.abortableIterable)(opened, req.signal, () => opened.abort?.())) {
                     toolArguments.observe(event);
                     if (event.type === 'content_block_delta' &&
                         event.delta?.type === 'text_delta' &&
@@ -144,7 +157,7 @@ function anthropic(options = {}) {
                         tokenIndex++;
                     }
                 }
-                const final = await stream.finalMessage();
+                const final = await (0, abort_js_1.untilAborted)(opened.finalMessage(), req.signal);
                 toolArguments.assertTerminal(final.content.some((block) => block.type === 'tool_use'));
                 const argumentFailures = new Map();
                 const checkedMessage = {
@@ -166,7 +179,7 @@ function anthropic(options = {}) {
                 yield { tokenIndex, content: '', done: true, response };
             }
             catch (err) {
-                throw wrapError(err);
+                throw wrapError(err, req.signal);
             }
         },
     };
@@ -230,7 +243,12 @@ function resolveClient(options) {
         ...(options.maxRetries !== undefined ? { maxRetries: options.maxRetries } : {}),
     });
 }
-function wrapError(err) {
+function wrapError(err, signal) {
+    // A cancelled call fails AS the cancellation, whatever the SDK threw for it
+    // (its own `APIUserAbortError` included) — never as a provider error that a
+    // retry would re-send (lib/abort.ts).
+    if (signal?.aborted)
+        return (0, abort_js_1.abortErrorOf)(signal);
     // See OpenAIProvider.wrapError — one shared detector, one typed error, so
     // "prompt is too long" reads the same whichever vendor said it.
     const tooBig = (0, contextWindow_js_1.asContextWindowExceeded)(err, { provider: 'anthropic' });

package/dist/adapters/llm/AnthropicProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"AnthropicProvider.js","sourceRoot":"","sources":["../../../src/adapters/llm/AnthropicProvider.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AAUH,6DAAuD;AACvD,+EAAmF;AACnF,mDAAwD;AACxD,mEAAmE;AACnE,yEAA8D;AAC9D,6DAG8B;AAC9B,6EAA6F;AAC7F,uDAAmD;AACnD,2EAAqE;AACrE,4FAAsF;AAEtF,qEAAqE;AACrE,yEAAyE;AACzE,6DAA6D;AAC7D,yEAKoC;AAmGpC;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAwB,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAEtF;;;;;;;;;;;;;GAaG;AACH,SAAgB,SAAS,CAAC,UAAoC,EAAE;IAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,4BAA4B,CAAC;IAC1E,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC;IAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACpD,gFAAgF;IAChF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1F,qEAAqE;IACrE,MAAM,MAAM,GAAG,IAAA,2CAAgB,EAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,CAAC,GAAe,EAAyB,EAAE;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO;YACL,KAAK;YACL,GAAG,IAAA,4CAAiB,EAAC,GAAG,EAAE;gBACxB,KAAK;gBACL,YAAY,EAAE,MAAM;gBACpB,QAAQ,EAAE,WAAW;gBACrB,gBAAgB,EAAE,gBAAgB;gBAClC,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,EAAE,iBAAiB,EAAE,CAAC;gBAC7D,kBAAkB,EAAE,qDAAgC;aACrD,CAAC;SACH,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAgB;QAC5B,IAAI,EAAE,WAAW;QACjB,iBAAiB,EAAE,mBAAmB;QACtC,uBAAuB,EAAE,IAAI;QAC7B,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,mDAA8B,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnF,0EAA0E;QAC1E,0DAA0D;QAC1D,yBAAyB,EAAE,IAAI;QAC/B,0BAA0B,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,qDAAgC,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvF,2EAA2E;QAC3E,qEAAqE;QACrE,aAAa,EAAE,gDAAwB;QACvC,yEAAyE;QACzE,eAAe,EAAE,sDAAwB;QACzC,qEAAqE;QACrE,yEAAyE;QACzE,qBAAqB;QACrB,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/C,KAAK,CAAC,QAAQ,CAAC,GAAe,EAAE,KAAoB;YAClD,MAAM,WAAW,GAAG,IAAA,mDAAsB,EAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,cAAc,GAAG,IAAA,kDAAqB,EAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,WAAW,CAAC,CAAC;YAC7E,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACrD,qEAAqE;gBACrE,oEAAoE;gBACpE,mDAAmD;gBACnD,OAAO;oBACL,GAAG,IAAA,gDAAqB,EAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACtF,YAAY,EAAE,IAAA,gCAAc,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC;oBAChE,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC;iBACpF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,GAAe,EAAE,KAAoB;YACjD,MAAM,WAAW,GAAG,IAAA,mDAAsB,EAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,cAAc,GAAG,IAAA,kDAAqB,EAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,WAAW,CAAC,CAAC;YAC7E,IAAI,MAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;YACD,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,MAAM,aAAa,GAAG,IAAI,kDAAsB,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBACjC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC7B,IACE,KAAK,CAAC,IAAI,KAAK,qBAAqB;wBACpC,KAAK,CAAC,KAAK,EAAE,IAAI,KAAK,YAAY;wBAClC,KAAK,CAAC,KAAK,CAAC,IAAI,EAChB,CAAC;wBACD,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;wBAC7D,UAAU,EAAE,CAAC;oBACf,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC1C,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC;gBACvF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAG7B,CAAC;gBACJ,MAAM,cAAc,GAAG;oBACrB,GAAG,KAAK;oBACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;wBAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;4BAAE,OAAO,KAAK,CAAC;wBAC5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;wBACnD,IAAI,OAAO,CAAC,OAAO;4BAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;wBAClE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;oBAC5C,CAAC,CAAC;iBACH,CAAC;gBACF,MAAM,QAAQ,GAAgB;oBAC5B,GAAG,IAAA,gDAAqB,EACtB,cAAc,EACd,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAC/C,gBAAgB,CACjB;oBACD,YAAY,EAAE,IAAA,gCAAc,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC;oBAChE,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC;iBACpF,CAAC;gBACF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC1D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAtHD,8BAsHC;AAED;;;GAGG;AACH,MAAa,iBAAiB;IACnB,IAAI,GAAG,WAAW,CAAC;IACnB,iBAAiB,GAAG,mBAAmB,CAAC;IACxC,uBAAuB,GAAG,IAAI,CAAC;IACxC,2FAA2F;IAClF,wBAAwB,CAA6B;IACrD,yBAAyB,GAAG,IAAI,CAAC;IAC1C,2FAA2F;IAClF,0BAA0B,CAA6B;IACvD,aAAa,GAAG,gDAAwB,CAAC;IACzC,eAAe,GAAG,sDAAwB,CAAC;IACpD,8EAA8E;IACrE,YAAY,CAAkC;IACtC,KAAK,CAAc;IAEpC,YAAY,UAAoC,EAAE;QAChD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAa,CAAC;QAC7C,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAyB,CAAC;QACrE,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA2B,CAAC;IAC3E,CAAC;IAED,sFAAsF;IACtF,QAAQ,CAAC,GAAe,EAAE,KAAoB;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,CAAC,GAAe,EAAE,KAAoB;QAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;CACF;AAjCD,8CAiCC;AAED,uEAAuE;AAEvE,SAAS,aAAa,CAAC,OAAiC;IACtD,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAE5C,IAAI,SAA8D,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,4BAAW,EAAkC,mBAAmB,CAE3E,CAAC;QACF,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAwD,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,iDAAiD;YAC/C,6CAA6C;YAC7C,yCAAyC,CAC5C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC/D,OAAO,IAAI,SAAS,CAAC;QACnB,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,MAAM,GAAG,IAAA,0CAAuB,EAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACvE,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,YAAY,GAAG,IAAA,qCAAqB,EAAC,GAAG,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE;YAC5D,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,GAAG;YACV,iEAAiE;YACjE,MAAM,EAAG,GAA2B,CAAC,MAAM;YAC3C,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,eAAe,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"AnthropicProvider.js","sourceRoot":"","sources":["../../../src/adapters/llm/AnthropicProvider.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AAUH,6DAAuD;AACvD,iDAAmG;AACnG,+EAAmF;AACnF,mDAAwD;AACxD,mEAAmE;AACnE,yEAA8D;AAC9D,6DAG8B;AAC9B,6EAA6F;AAC7F,uDAAmD;AACnD,2EAAqE;AACrE,4FAAsF;AAEtF,qEAAqE;AACrE,yEAAyE;AACzE,6DAA6D;AAC7D,yEAKoC;AA8GpC;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAwB,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAEtF;;;;;;;;;;;;;GAaG;AACH,SAAgB,SAAS,CAAC,UAAoC,EAAE;IAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,4BAA4B,CAAC;IAC1E,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC;IAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACpD,gFAAgF;IAChF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1F,qEAAqE;IACrE,MAAM,MAAM,GAAG,IAAA,2CAAgB,EAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,CAAC,GAAe,EAAyB,EAAE;QAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO;YACL,KAAK;YACL,GAAG,IAAA,4CAAiB,EAAC,GAAG,EAAE;gBACxB,KAAK;gBACL,YAAY,EAAE,MAAM;gBACpB,QAAQ,EAAE,WAAW;gBACrB,gBAAgB,EAAE,gBAAgB;gBAClC,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,EAAE,iBAAiB,EAAE,CAAC;gBAC7D,kBAAkB,EAAE,qDAAgC;aACrD,CAAC;SACH,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAgB;QAC5B,IAAI,EAAE,WAAW;QACjB,iBAAiB,EAAE,mBAAmB;QACtC,uBAAuB,EAAE,IAAI;QAC7B,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,mDAA8B,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnF,0EAA0E;QAC1E,0DAA0D;QAC1D,yBAAyB,EAAE,IAAI;QAC/B,0BAA0B,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,qDAAgC,EAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvF,2EAA2E;QAC3E,qEAAqE;QACrE,aAAa,EAAE,gDAAwB;QACvC,yEAAyE;QACzE,eAAe,EAAE,sDAAwB;QACzC,qEAAqE;QACrE,yEAAyE;QACzE,qBAAqB;QACrB,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/C,KAAK,CAAC,QAAQ,CAAC,GAAe,EAAE,KAAoB;YAClD,wDAAwD;YACxD,IAAA,yBAAc,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,WAAW,GAAG,IAAA,mDAAsB,EAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,cAAc,GAAG,IAAA,kDAAqB,EAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,WAAW,CAAC,CAAC;YAC7E,IAAI,CAAC;gBACH,sEAAsE;gBACtE,uEAAuE;gBACvE,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAY,EAChC,GAAG,CAAC,MAAM;oBACR,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;oBACxD,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAClC,GAAG,CAAC,MAAM,CACX,CAAC;gBACF,qEAAqE;gBACrE,oEAAoE;gBACpE,mDAAmD;gBACnD,OAAO;oBACL,GAAG,IAAA,gDAAqB,EAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACtF,YAAY,EAAE,IAAA,gCAAc,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC;oBAChE,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC;iBACpF,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,GAAe,EAAE,KAAoB;YACjD,IAAA,yBAAc,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,WAAW,GAAG,IAAA,mDAAsB,EAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,cAAc,GAAG,IAAA,kDAAqB,EAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,WAAW,CAAC,CAAC;YAC7E,IAAI,MAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,CAAC,MAAM;oBACjB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;oBACxD,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC;YACtB,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,MAAM,aAAa,GAAG,IAAI,kDAAsB,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,kEAAkE;gBAClE,yDAAyD;gBACzD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAA,4BAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;oBACxF,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC7B,IACE,KAAK,CAAC,IAAI,KAAK,qBAAqB;wBACpC,KAAK,CAAC,KAAK,EAAE,IAAI,KAAK,YAAY;wBAClC,KAAK,CAAC,KAAK,CAAC,IAAI,EAChB,CAAC;wBACD,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;wBAC7D,UAAU,EAAE,CAAC;oBACf,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,IAAA,uBAAY,EAAC,MAAM,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBACpE,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC;gBACvF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAG7B,CAAC;gBACJ,MAAM,cAAc,GAAG;oBACrB,GAAG,KAAK;oBACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;wBAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;4BAAE,OAAO,KAAK,CAAC;wBAC5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;wBACnD,IAAI,OAAO,CAAC,OAAO;4BAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;wBAClE,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;oBAC5C,CAAC,CAAC;iBACH,CAAC;gBACF,MAAM,QAAQ,GAAgB;oBAC5B,GAAG,IAAA,gDAAqB,EACtB,cAAc,EACd,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAC/C,gBAAgB,CACjB;oBACD,YAAY,EAAE,IAAA,gCAAc,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC;oBAChE,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC;iBACpF,CAAC;gBACF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC1D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AArID,8BAqIC;AAED;;;GAGG;AACH,MAAa,iBAAiB;IACnB,IAAI,GAAG,WAAW,CAAC;IACnB,iBAAiB,GAAG,mBAAmB,CAAC;IACxC,uBAAuB,GAAG,IAAI,CAAC;IACxC,2FAA2F;IAClF,wBAAwB,CAA6B;IACrD,yBAAyB,GAAG,IAAI,CAAC;IAC1C,2FAA2F;IAClF,0BAA0B,CAA6B;IACvD,aAAa,GAAG,gDAAwB,CAAC;IACzC,eAAe,GAAG,sDAAwB,CAAC;IACpD,8EAA8E;IACrE,YAAY,CAAkC;IACtC,KAAK,CAAc;IAEpC,YAAY,UAAoC,EAAE;QAChD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAa,CAAC;QAC7C,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAyB,CAAC;QACrE,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA2B,CAAC;IAC3E,CAAC;IAED,sFAAsF;IACtF,QAAQ,CAAC,GAAe,EAAE,KAAoB;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,CAAC,GAAe,EAAE,KAAoB;QAC1C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;CACF;AAjCD,8CAiCC;AAED,uEAAuE;AAEvE,SAAS,aAAa,CAAC,OAAiC;IACtD,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAE5C,IAAI,SAA8D,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,4BAAW,EAAkC,mBAAmB,CAE3E,CAAC;QACF,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAwD,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,iDAAiD;YAC/C,6CAA6C;YAC7C,yCAAyC,CAC5C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC/D,OAAO,IAAI,SAAS,CAAC;QACnB,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,MAAoB;IACnD,4EAA4E;IAC5E,4EAA4E;IAC5E,sCAAsC;IACtC,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,IAAA,uBAAY,EAAC,MAAM,CAAC,CAAC;IACjD,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,MAAM,GAAG,IAAA,0CAAuB,EAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACvE,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,YAAY,GAAG,IAAA,qCAAqB,EAAC,GAAG,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE;YAC5D,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,GAAG;YACV,iEAAiE;YACjE,MAAM,EAAG,GAA2B,CAAC,MAAM;YAC3C,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,eAAe,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACjD,CAAC"}